Re: [qubes-project] Re: [qubes-users] good bye, qubes-users list

2019-03-01 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 01/03/2019 3.00 PM, Achim Patzner wrote:
> On 28.02.2019 20:00:46, "Holger Levsen" 
> wrote:
>> Obviously I do think that some mailinglist moderation is in
>> order... I'd probably be willing to come back, if some changes
>> have been implemented, but like it is, it's sadly a waste of time
>> and mental energy.
> 
> Seconded. What about a seriously moderated and access restricted 
> "qubes-technical" list?
> 
> 
> Achim
> 

As a reminder, qubes-devel is moderated and is reserved for developer
discussions, so it might be what you're looking for. For more
information, please see:

https://www.qubes-os.org/support/#qubes-devel

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-BEGIN PGP SIGNATURE-

iQIzBAEBCgAdFiEEZQ7rCYX0j3henGH1203TvDlQMDAFAlx6MdUACgkQ203TvDlQ
MDD8GQ/7BnhTvfdF67fNY01e53nOddBwHKAqQ6UQJ2/qSketA8LL5+gviGzna0pk
GwknhBPa05+byCRzirZQfaUCD2aL94keKb2qsyxAM4SYLnp42v2ZtI9O905PFlY3
ZrF2/80WvAFQpocN3JI6SQdR9kXimIBBNqEbbHvSW8p8vR+QcFA3nboxSzsaPXmo
3Bgsj24tWSIV3PdBdhQl4W0xSvX7xrFzFHcz4cUhTCY64/QM7ts2RYgE8JFBf2Nm
jmP7FGRsy6Zh6CAPNQepwshyhc7V8emAI7smprw5R5VCZQ2nL7N6UTHjObsVMuPh
5omclOs2CCaiGWJ3JVTqqCdSwBRxYWDPTGyPzt2ck6U4w1YP4XsOG39UCZ4p+xHG
UYOkh+f5UHVZNutShaJuawTZ93YSJo4upUpe7D9lDdzxHrWfp03zLVEAB2VG2byw
GmktUzxEAitkUFNsX4sqF2ZgkM3kRb25girKbbGp+sp5YXzRjqPbXis72ZFkxogL
RcRK1QvKPnwzn9QyZtUrZowcCXJpSz2hMuNxDmatRoYIe6P/pp+eoK9MFypXtIJy
EWJfYsTsunL7Jp0qAzyrBuwutyK31yIFuMQ6lpTAaudfslFFwO5U9sDI4vYvZdAl
TmbqthIto3BxprpkbYvKLGaEgzP5to9or/FOGz8GUgE/cQIUosI=
=r3Ec
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fc694f76-5ce6-6f31-ab8c-0028caf82e05%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Responding to the Whonix trolls...

2019-03-01 Thread cooloutac
On Friday, March 1, 2019 at 10:02:03 PM UTC-5, haaber wrote:
> >
> > I don't want a list that is banning people or excluding them. It's
> > regrettable that Whonix does so. In my experience, that rarely works
> > given the ready availability of new email addresses.
> > If you don't like a user, just add them to your kill file.
> > Build the community that *you* want, by promoting the issues/discussions
> > that are of value. Let the others wither away.
> > Credit readers with the sense to decide who is worth listening to.
> >
> > unman
> >
> I'd second unman. Several times I have had some precious help by
> raahelps. The strength of a group comea from the fact that even if
> sometimes, someone gets mad, there is someone else who is willing to
> listen. Building closed subcommunities actually weakens the whole project.
> 
> Be kind to people who are angry, they need it most : If you can't stand
> it (I can understand that), better filter mails that contain swear
> words: that is more efficient than banning emails and allows anyone to
> come back to the group after he/she went mad for whatsoever reason.
> Bernhard

Ty Bernhard.  I just don't like when people are rude to those asking for help.  
 And yes you are correct I always have issues going on...

And to others I know I'm not a technical guy.  Thats why I would never post on 
Qubes-devel.  I'm just the average user.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8333dd4d-90f7-446a-a360-caf96a069686%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Responding to the Whonix trolls...

2019-03-01 Thread haaber


I don't want a list that is banning people or excluding them. It's
regrettable that Whonix does so. In my experience, that rarely works
given the ready availability of new email addresses.
If you don't like a user, just add them to your kill file.
Build the community that *you* want, by promoting the issues/discussions
that are of value. Let the others wither away.
Credit readers with the sense to decide who is worth listening to.

unman


I'd second unman. Several times I have had some precious help by
raahelps. The strength of a group comea from the fact that even if
sometimes, someone gets mad, there is someone else who is willing to
listen. Building closed subcommunities actually weakens the whole project.

Be kind to people who are angry, they need it most : If you can't stand
it (I can understand that), better filter mails that contain swear
words: that is more efficient than banning emails and allows anyone to
come back to the group after he/she went mad for whatsoever reason.
   Bernhard

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/8fbe8935-67de-c475-e4a8-e42d3e5ecf07%40web.de.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Responding to the Whonix trolls...

2019-03-01 Thread unman
On Fri, Mar 01, 2019 at 07:27:08PM +, Achim Patzner wrote:
> On 28.02.2019 15:10:21, "unman"  wrote:
> 
> 
> > On Thu, Feb 28, 2019 at 11:03:12AM +0100, Achim Patzner wrote:
> > >  On 20190227 at 22:30 -0800 cooloutac wrote:
> > > 
> > >  Whenever I accidentally read a posting by raahelps@ I'm wondering what
> > >  crime we committed to have to bear something like this and what could
> > >  be done to avoid attracting people like that...
> > > 
> > >  Do us all a favour and go troll somewhere else
> > I don't think this is helpful
> 
> I guess I'm of a different opinion in that case. Sometimes someone has to
> speak up and draw a line in the sand.

All you are doing is perpetuating the problem.

> 
> > Please consider the guidelines and be respectful and polite to others.
> 
> Unlike others I strongly believe that respect has to be earned and it can be
> retracted. The user in question spent nearly all his time on this mailing
> list. And _none_ of his postings ever enriched any discussion.

I don't agree. I have my own problems with that user, but he has in the
past provided help on the list, and will do in the future.

> 
> Keep in mind that "a wise man changes his mind, a fool never will" just
> means the fools will win in the end.
> 
> > None of these accusations of trolling help build the community, or
> > advance Qubes.
> 
> In that case I would like to demand a vote (of exclusion of certain users)
> as this is building a community I wouldn't want to be a part of. I can
> understand why he is not welcome on the whonix lists anymore. And I strongly
> believe it should be the same here. I guess we will need a management
> decision on that point.
> 
> 
> Achim

I don't want a list that is banning people or excluding them. It's
regrettable that Whonix does so. In my experience, that rarely works
given the ready availability of new email addresses.
If you don't like a user, just add them to your kill file.
Build the community that *you* want, by promoting the issues/discussions
that are of value. Let the others wither away.
Credit readers with the sense to decide who is worth listening to.

unman



-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190302022114.y3m6sxkek762rnaf%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Qubes: Unable to connect to VPN

2019-03-01 Thread unman
On Fri, Mar 01, 2019 at 01:47:22PM -0800, Otto Kratik wrote:
> On Tuesday, February 19, 2019 at 2:53:22 PM UTC-5, Jon deps wrote:
> 
> > https://www.qubes-os.org/doc/vpn/
> > 
> > I believe it would be helpful  if you indicate  which method  you have 
> > used to create the VPNper the URL  there 
> > 
> > 
> > perhaps it is more obvious to others 
> 
> 
> Thanks for your reply - sorry I somehow missed seeing it earlier. I managed 
> to sort of figure out what is going on and sort of fix it.
> 
> I am using the super-simple method of just invoking "openvpn whatever.ovpn" 
> from  terminal within an AppVM itself, rather than creating a dedicated proxy 
> or gateway as suggested in the docs. What is happening is the following..
> 
> Initially before connecting to the vpn, the file /etc/resolv.conf contains 
> the default Qubes sys-net dns entries, namely:
> 
> nameserver 10.139.1.1
> nameserver 10.139.1.2 
> 
> 
> When the vpn connects, it uses update-resolv-conf to overwrite the contents 
> of that file. It places some comment-text near the top and changes the 
> nameserver entries to its own, which is good and wanted of course. No 
> complaints.
> 
> When terminating the vpn connection by any means available (I tried several 
> different ones), openvpn again automatically updates that /etc/resolv.conf 
> file, but *only* to remove the entries it placed there, nothing more. The 
> comment-text is left intact and the nameserver entries are simply deleted, 
> resulting in a more or less empty and useless file and no DNS resolution 
> whatsoever. The script does not seem to store and remember the previous 
> entries that were there before (sys-net defaults) and replace them when 
> finished. It just erases everything and leaves it like that.
> 
> Thus after disconnecting the vpn I have to go back into that file and 
> manually re-add the sys-net entries to regain DNS resolution functionality. 
> Ultimately I'm just going to write a short bash script that puts the needed 
> entries back after disconnection, which I'll run at termination every time.
> 
> I don't know enough about openvpn to instruct it to "always run this extra 
> script upon disconnection", though I'm sure there must be a relatively easy 
> way to do so.
> 

Call it with --down   to have a script run when the tunnel closes.
If you check the man page, there are a variety of different options for
running scripts/commands at different events, but I suspect that will
fit the bill.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190302020753.fufcx25cdx2k5r6c%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] good bye, qubes-users list

2019-03-01 Thread cooloutac
hmm seems its hard to find.  so I don't blame you for not knowing about it. 

here you go  https://groups.google.com/forum/#!forum/qubes-devel

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1af33d73-3d78-4318-9e53-0a332076ed62%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] good bye, qubes-users list

2019-03-01 Thread cooloutac
On Friday, March 1, 2019 at 4:00:13 PM UTC-5, Achim Patzner wrote:
> On 28.02.2019 20:00:46, "Holger Levsen"  wrote:
> >Obviously I do think that some mailinglist moderation is in order...
> >I'd probably be willing to come back, if some changes have been implemented,
> >but like it is, it's sadly a waste of time and mental energy.
> 
> Seconded. What about a seriously moderated and access restricted 
> "qubes-technical" list?
> 
> 
> Achim


The "technical" forum is called qubes-devel.   Don't worry. I promised Marek 
once I'd never post in there.  enjoy.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/9800d40e-ab0c-4bd7-a6a2-d497b2c2ee42%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: Re[2]: [qubes-users] Responding to the Whonix trolls...

2019-03-01 Thread cooloutac
Or is this a slick way to try and get me to use tor.  Because we know evading 
bans is one of the things its most known for lol...  Oh wait.  Google probably 
already bans tor,  which is why this place has been so troll free for the years 
I've been posting here.

Maybe you should start a German forum on some other platform and then you can 
all go there.  Rather then make even more people complicit in patricks drama.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/18e8271c-296c-4b86-b8e6-e338c5419fb3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: Re[2]: [qubes-users] Responding to the Whonix trolls...

2019-03-01 Thread cooloutac
I saw another user complain about patricks behavior.  I commented to say I've 
experience the same thing so that user did not feel alone.

Then I responded to the notice in my email that Patrick posted on whonix 
forums.  Then he hurls a profanity at me.  Which has now been deleted and he 
denies.  And now I'm banned so I can't respond.   

I was the one first called a troll.  I was the one being badmouthed. I'm not 
gonna let him ban me and hide like a coward. 

His character is definitely related to the integrity of Qubes.  If he has none, 
 how can we expect his project to have some?

I've stated my opinions and experiences with the whonix qube and tor.  And If 
you don't like them state your case.  Rather then try to censor me like a 
nazi...

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a199af5c-6e11-47bc-924f-33b75bf61138%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Qubes: Unable to connect to VPN

2019-03-01 Thread Otto Kratik
On Tuesday, February 19, 2019 at 2:53:22 PM UTC-5, Jon deps wrote:

> https://www.qubes-os.org/doc/vpn/
> 
> I believe it would be helpful  if you indicate  which method  you have 
> used to create the VPNper the URL  there 
> 
> 
> perhaps it is more obvious to others 


Thanks for your reply - sorry I somehow missed seeing it earlier. I managed to 
sort of figure out what is going on and sort of fix it.

I am using the super-simple method of just invoking "openvpn whatever.ovpn" 
from  terminal within an AppVM itself, rather than creating a dedicated proxy 
or gateway as suggested in the docs. What is happening is the following..

Initially before connecting to the vpn, the file /etc/resolv.conf contains the 
default Qubes sys-net dns entries, namely:

nameserver 10.139.1.1
nameserver 10.139.1.2 


When the vpn connects, it uses update-resolv-conf to overwrite the contents of 
that file. It places some comment-text near the top and changes the nameserver 
entries to its own, which is good and wanted of course. No complaints.

When terminating the vpn connection by any means available (I tried several 
different ones), openvpn again automatically updates that /etc/resolv.conf 
file, but *only* to remove the entries it placed there, nothing more. The 
comment-text is left intact and the nameserver entries are simply deleted, 
resulting in a more or less empty and useless file and no DNS resolution 
whatsoever. The script does not seem to store and remember the previous entries 
that were there before (sys-net defaults) and replace them when finished. It 
just erases everything and leaves it like that.

Thus after disconnecting the vpn I have to go back into that file and manually 
re-add the sys-net entries to regain DNS resolution functionality. Ultimately 
I'm just going to write a short bash script that puts the needed entries back 
after disconnection, which I'll run at termination every time.

I don't know enough about openvpn to instruct it to "always run this extra 
script upon disconnection", though I'm sure there must be a relatively easy way 
to do so.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/2924a4fe-1416-43c6-b241-7b87c5b3476f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] good bye, qubes-users list

2019-03-01 Thread Achim Patzner

On 28.02.2019 20:00:46, "Holger Levsen"  wrote:

Obviously I do think that some mailinglist moderation is in order...
I'd probably be willing to come back, if some changes have been implemented,
but like it is, it's sadly a waste of time and mental energy.


Seconded. What about a seriously moderated and access restricted 
"qubes-technical" list?



Achim

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/em6780f1cf-77c6-4ffa-9c98-f82a8f9febfd%40sir-face.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] where/how does dom0 gets its icons?

2019-03-01 Thread Daniel Allcock
Hello,
I would like to understand what to do to customize the icons
that appear in the Q menu for template and app vms.
The only way I have found that works is to overwrite icon
files in /usr/share/icons/Adwaita/* in the template vm.

In dom0 it is easy: I put an icon folder Qubes in ~/.icons, 
with a custom svg icon for a terminal, named appropriately, and Adwaita
as backup icon theme, ran gtk-update-icon-theme, and then chose that
icon theme in xfce settings.  Everything just works.

But nothing similar seems to work in a template vm.  I'm using
almost-stock Fedora 29, if that matters.  dom0's qvm-sync-appmenus
seems to be the program that imports the desktop files from vm's
to dom0, and their corresponding icons.  I tried to figure out
how it worked, but failed.  It does not seem to consult any 
sort of icon theme setting in appvm or templatevm. 
It also does not seem to use an icon theme
of the same name "Qubes" I chose in dom0, even if I install such a theme
in the template.  (This would be another 
reasonable behavior.)  Does it just
use Adwaita icons? Also, the man page suggests that qvm-sync-appmenus
looks only at template and standalone vm's. So if we
add a custom application to an appvm, we must add its desktop
file to the Q menu by hand?  (am not sure how to do this in a way
that won't get overwritten.)  When is a lock icon chosen?  What
program does the vm-dependent icon colorization?

I feel I could figure things out if I had a basic understanding of
how the Q menu items and their icons are assembled and imported.
Are there any pointers to explanations of this?

(If anyone is interested in making icons themselves, they are super-easy
to make in inkscape.  Just keep them simple, black/white, or greyscale
with lots of white, and with a clear background.  Lots of white makes
the icon-colorization process give attractive icons that look very
different from the same icons used in other-colored vm's.)

Thank you,
Daniel 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190301135419.6de7dea5%40allcock.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: thunderbird address book corrupted

2019-03-01 Thread John Goold
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 2/28/19 12:39 PM, Jon deps wrote:
> On 2/25/19 7:07 AM, Foppe de Haan wrote:
>> On Sunday, February 24, 2019 at 10:04:30 PM UTC+1, Jon deps
>> wrote:
>>> Hello, I realize it's not exactly a qubes thing. but, does
>>> anybody else unable to save any new entries in thunderbird 
>>> address book
>> 
>> try updating tb, looks like it's a bug in 60.5.
>> 
> 
> thanks, well I just use whatever Fedora-29  provides which at the
> moment is 60.5.1
> 
> where did you see the bug report ?
> 
> it seems to have been this way for many months,  can't create new 
> contact, can add any new info to existing entries,  I tried
> removing the .mab  files  in .thunderbird and making a new "book"
> but still can't add any entries ...
> 

I resolved the problem using the Thunderbird CardBook plug-in. Follow
the installation instructions as they provide useful information about
switching from the built-in address book.

It is more standards compliant (easier import/export options) and the
UI is better (in my opinion). You can try it for a while before
committing to CardBook (I only took a couple of days; my wife took a
couple of weeks).

Cheers,
John
-BEGIN PGP SIGNATURE-

iQEzBAEBCAAdFiEEe8Wcf7Po7bts2Rl4jWN9/rQYsRwFAlx5iJsACgkQjWN9/rQY
sRxaqwf+JEZx4zWRO525YPuI2Pj+HB/Ix72WpvIFE0OHgatmjLapzdQWhbyNWhqf
jMraQClp/PnApbQm268TFPeNHvaJDWMzrdtSJi7S8YXHzzil+8Ma1wI9twrHwljT
illhec4EzDl3+v8Ra8EGPQD1OpMtk7b0lBv76NQsvtllOTcQ9AhTfsKRwIZ4ze1H
/6ryKsbnK3kpuZaRAD19a+KPfdXF4VYYxSsNrVeSdkIiQpTxjg4P3e+IiXJzwpvS
csGu9MbTt52w4jOiS43+C6nD0aXtelpPzA53XZ8/5CTtt02TVQMkNsGxwuBhoX3r
AG5RP2hnbf1EF8p/rkD69nTSBRMUlw==
=yy+X
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fdd38ed8-2b0b-92b0-29cf-739506799454%40gmail.com.
For more options, visit https://groups.google.com/d/optout.


Re[2]: [qubes-users] Responding to the Whonix trolls...

2019-03-01 Thread Achim Patzner

On 28.02.2019 15:10:21, "unman"  wrote:



On Thu, Feb 28, 2019 at 11:03:12AM +0100, Achim Patzner wrote:

 On 20190227 at 22:30 -0800 cooloutac wrote:

 Whenever I accidentally read a posting by raahelps@ I'm wondering what
 crime we committed to have to bear something like this and what could
 be done to avoid attracting people like that...

 Do us all a favour and go troll somewhere else

I don't think this is helpful


I guess I'm of a different opinion in that case. Sometimes someone has 
to speak up and draw a line in the sand.



Please consider the guidelines and be respectful and polite to others.


Unlike others I strongly believe that respect has to be earned and it 
can be retracted. The user in question spent nearly all his time on this 
mailing list. And _none_ of his postings ever enriched any discussion.


Keep in mind that "a wise man changes his mind, a fool never will" just 
means the fools will win in the end.



None of these accusations of trolling help build the community, or
advance Qubes.


In that case I would like to demand a vote (of exclusion of certain 
users) as this is building a community I wouldn't want to be a part of. 
I can understand why he is not welcome on the whonix lists anymore. And 
I strongly believe it should be the same here. I guess we will need a 
management decision on that point.



Achim

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/emae3e488d-2e2c-40a3-aca0-de466355820d%40sir-face.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Installing snaps in appvms?

2019-03-01 Thread Stumpy

On 2/15/19 10:39 PM, Stumpy wrote:

On 1/9/19 8:02 PM, Stumpy wrote:

On 1/9/19 7:54 PM, Stumpy wrote:

On 1/9/19 7:32 PM, Marek Marczykowski-Górecki wrote:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Wed, Jan 09, 2019 at 07:11:50PM -0500, Chris Laprise wrote:

On 01/09/2019 06:41 PM, Stumpy wrote:

On 1/8/19 7:59 PM, 'awokd' via qubes-users wrote:

Stumpy wrote on 1/9/19 12:07 AM:

On 1/8/19 7:04 PM, Stumpy wrote:

I thought I had snap installed but the app i installed via
snap now does not seem to be working? I installed snapd in
dom0 then tried installing a snap package in one of appvms
but I am getting errors. If i try to run a snap from dom0:
qvm-run gfx /snap/bin/xnview

I get:
Running '/snap/bin/xnview/ on gfx
gfx: command failed with code: 1

when i try to run it within the appvm i get:
user@gfx:~$ xnview
Can not open
/var/lib/snapd/seccomp/profiles//snap.xnview.xnview (No such
file or directory)
aborting: No such file or directory

thoughts? please?



oh, and if i try to reinstall the app I get:
user@gfx:~$ sudo snap install xnview
snap "xnview" is already installed


Nothing should be installed to dom0. You'd have to install snapd in
a template, and possibly the snap package. You might want to create
a Standalone VM and install everything in there, instead of
templates & AppVMs.




Thanks, I had thought I had to install on dom0 as well, perhaps not,
though when I try to:

sudo snap install xnview from the template I get:
user@debian-9:~$ sudo snap install xnviewmp
error: cannot install "xnviewmp": Get 
https://search.apps.ubuntu.com/api/v1/snaps/details/core?channel=stable&fields=anon_download_url%2Carchitecture%2Cchannel%2Cdownload_sha3_384%2Csummary%2Cdescription%2Cdeltas%2Cbinary_filesize%2Cdownload_url%2Cepoch%2Cicon_url%2Clast_updated%2Cpackage_name%2Cprices%2Cpublisher%2Cratings_average%2Crevision%2Cscreenshot_urls%2Csnap_id%2Csupport_url%2Ctitle%2Ccontent%2Cversion%2Corigin%2Cdeveloper_id%2Cprivate%2Cconfinement: 


dial tcp: lookup search.apps.ubuntu.com on 10.137.3.254:53: dial udp
10.137.3.254:53: connect: network is unreachable

So i was thinking that doing a qubes-dom0-update something so it 
could
get through? For the life of me i cant figure out what I did on my 
other

computer to make it work but it works fine there.


I forgot to mention, it is installed in the appvm:


user@debian-9:~$ sudo apt-get install snapd
Reading package lists... Done
Building dependency tree
Reading state information... Done
snapd is already the newest version (2.21-2+b1).
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.


ideas?



Only apt is configured to access servers through the special Qubes 
proxy.
Since templates have networking turned off by default, that means 
nothing

else can download packages or data.

In the short term, you can try enabling networking temporarily for the
template while you install snap packages. Just set the netvm in the
template's settings.

In the long term, Qubes users may benefit from a special 
accommodation of
snap, which has become a versatile and important way to install 
software.

Support could include access through the update proxy and even special
storage capabilities. Would be a good idea to open an enhancement 
issue for

this. :)


There is some progress on this already:
https://github.com/QubesOS/qubes-issues/issues/2766

The current state is: you can install "qubes-snapd-helper" package in
_template_, to be able to install snaps in qubes _based on that 
template_.



- -- Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-BEGIN PGP SIGNATURE-

iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAlw2kq8ACgkQ24/THMrX
1yzNvwgAhc0/O9VIzBGH1WDg8l+1sH3yLxxySFannO2ihUUXbUA80cf4+uxrxk/1
Rg+jR0XfdBXD91h817luvs3mIdqwcluq1YHxbGIb0J/vALPLHRhZ8YLasXSdpDIG
MyiVTk1ogAOG6jH30245V/GRPWALJmysYnW4DUki3ZefG/EyCFHWi7lpJZ9XS00F
QbVv7MoDx6GbHiSfHMzYk016fSaEAFlXGUUXczSHgDpJjumP6+MfVkz0l4diYbm5
wGOPIknWLBBSQMMOS0IoaB1iq1hYbZNULt6/gaOOFBIC2I9D2m4Q8KHKeDz95qln
HEzk2d5IJJlv8M1xpoNyzS0+IJNHMQ==
=hL/D
-END PGP SIGNATURE-

Thanks Marek! I thought there was something, I will recheck what I 
have done and make sure I tried the snapd helper in the right place.




That got it Yeah!! Thank you soo much.
Made notes on how it got done this time :)



appologies for digging up such an old thread but I am back to having 
issues with snaps. I installed qubes-snapd-helper in the template awhile 
ago and then in my appvm I tried to install xnviewmp, foobar2000, and 
firefox quantum but to get foobar2000 started I have to run:


sudo snap install wine-platform
sudo snap install foobar2000
sudo snap connect foobar2000:wine-platform-plug 
wine-platform:wine-base-stable

sudo snap connect foobar2000:removable-media

though perhaps I just need the last two lines because it keeps telling 
me that wine and foobar2000 are installed.


for fir

Re: [qubes-users] Deleting debian-9 template and getting a new one returns an error: "Error: Unable to find a match"

2019-03-01 Thread unman
On Thu, Feb 28, 2019 at 10:09:38PM -0500, Chris Laprise wrote:
> On 2/28/19 8:30 PM, Sphere wrote:
> > I was sure I double checked the line of code I used in dom0 terminal to get 
> > a new template which was
> > "sudo qubes-dom0-update qubes-template-debian-9"
> > 
> > Not sure why running this returns with the "Error: Unable to find a match" 
> > while just changing 9 to 8 actually works
> > 
> > The same case happens when I try qubes-template-fedora-29, where my 
> > fedora-29 template still exists
> > 
> > If this is because of some sort of name conflict issue, how could I 
> > download the template/s and have them be named something else?
> > 
> 
> The older release with the apt vulnerability may have been removed from the
> repository, and the patched version may still be in testing?
> 
> Easiest way to resolve that is to add '--enablerepo=qubes*testing'.
> 

I dont believe this is so.
A fixed version (201901281256) is in qubes-templates-itl, and I
*believe* that I grabbed it from there before.
What you need to run is:
sudo qubes-dom0-update --enablerepo=qubes-templates-itl  qubes-template-debian-9

@Sphere - do you have a debian-8 installed? If so it may be that yum
remembers which repo it installed from, and so is able to grab the
update. If this isnt the case (and the repo wasnt updated during the
day) then I'm lost for an explanation.

Generally, if you want to do this manually, you can always grab from
https://yum.qubes-os.org/r4.0/templates-itl/rpm.
Download the package.
Manully check the signature using "rpm -K" (You will need to get signing
key and Qubes master)
Transfer to dom0
install using "rpm -i "

Much better to use the native tools, but that option is always
available.

unman

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/20190301123804.sdgxs55dka24vyvx%40thirdeyesecurity.org.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: [In]Valid Concerns Regarding Integrity of Whonix Project

2019-03-01 Thread cooloutac
I really believe using tor actually puts my hardware and data more at risk.  

You say tor has plenty of bandwidth to go around,  but it certainly doesn't 
feel like that.  and I don't want to be using up bandwidth somebody else truly 
needs.

I was using tor sometimes for updating qubes,  but it was too slow. I was using 
tor to go to youtube,  so videos I watched didn't pop up on my family's screen 
on the same ip.  

But from this day forth i will abstain from using tor in the future.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b0cc04a8-11d9-4ebc-a252-cafd258ab86e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: [In]Valid Concerns Regarding Integrity of Whonix Project

2019-03-01 Thread cooloutac
I mean I do know alot of debian users  who never log into anything online. They 
don't shop online,  bank online,facebook, twitter,   would never dare step 
foot on a google mailing list.  They don't do anything on their pc basically.  
I would of committed suicide a long time ago living like that.   

I can't be anonymous online I guess is my point for most of my daily activites, 
 and nobody is hunting my physical location.  And even if they were they could 
find me easily.
  
I care more about performance for sure.  And the security of my hardware and 
data from remote attacks.   

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c1104b7c-7aab-4998-9b7e-dc38b272b9d5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: [In]Valid Concerns Regarding Integrity of Whonix Project

2019-03-01 Thread cooloutac
On Thursday, February 28, 2019 at 5:49:20 PM UTC-5, awokd wrote:
> cooloutac wrote on 2/28/19 5:45 PM:
> > [Tor] needs expanding,
> > 
> Sounds good to me! But there is plenty of spare bandwidth already: 
> https://metrics.torproject.org/bandwidth-flags.html.
> 
> I believe there are occasional hostile exit nodes, but if you have to 
> trust the infrastructure/Internet in general, you are doing it wrong. 
> Like a lot of things in security, you have to figure out the trade-offs 
> and develop a solution that works for you. If performance is more 
> important in your application than anonymity, then Tor is probably not 
> the right choice for you. However, others have different priorities.

Why is it so painfully slow then.  It doesn't seem practical to use at all for 
daily activities.  Even using it to update fedora was horrible.   Not to 
mention whonix constantly timing out.  I can't be alone in thinking this.

If you are actually waiting 5 mins to log into facebook,  you better be fearing 
for your life.  Not trying to stop google from tracking you lmao...

10 mins can also cost a life.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/66925a00-a694-422d-bed8-9c9303d0697c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.